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ABSTRACT 


This report summarizes the results of a brief assessment of 
Automatic Data Processing (ADP) activities within the Intelli- 
gence Community (IC) , to identify promising avenues for future 
improvements. 5 r “r rurure 

Users needs and commonality between hardware and software svs- 
J eviewed > and some alternative concepts are presented 
for data base management systems. Finally, policy and techni- 
cal issues are identified together with means for achieving a 
Community-wide information system. ® 
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SUMMARY 


The rapid growth of the Intelligence Community ana the 
orders of magnitude expansion of Automatic Data Processing with- 
in elements of the IC have promoted decentralized planning sri 
management of software and hardware systems and data bases 
Many of these systems have common characteristics, and in that 
sense are duplicative. It is believed that these represent co- 
portunities for improved efficiency and cost saving. 

For example, the prevalent IC ADP systems perforin communi- 
cation, collection, processing and production functions. 5©»e 
of these systems possess the characteristics of data base mar - 
agement systems (DBMS), and are therefore considered amenable 
to some consolidation, commonality and Community-wide accessing. 
The CIA SAFE and DIA ADISS Systems fall into this general cate- 
gory; in addition, 6 other major systems of this type were quick- 
ly identified in this brief overview, and we understand that there 
may be 30 such IC systems alltold. Hence the current Congres- 
sional interest in SAFE/ADISS may in fact only be focused on the 
tip of the iceberg! 

This paper presents a few alternative concepts for deve l- 
oping broader based, Community-wide DBMS, merely to illustrate 
approaches and associated advantages/disadvantages of each, De- 
tailed cost-benefit analyses are needed to home in on system >• s) 
that smoothly transition from the maze that exists today, to 
more efficient, centralized solutions for the future. These 
analyses should be part of an organized effort which addresses 
the feasibility and value of adopting or developing a Community 
standard data base management system. This effort also extends 
beyond the SAFE/ADISS question, because with time the existing 
"home grown" DBMS will be outdated technically and will recall re 
updating and replacement. 

Fundamental to achieving Community-wide systems is the 
resolution of a family of policy and technical issues which are 
complex, and have mostly been treated piecemeal in the past. 

These relate to sharing data bases; agency access; technical 
data standards and languages; interfaces and security. Specif- 
ics are discussed in Section IV. 


ii 
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An area of immediate concern to the DCI is a timely a no 
well thought out response to the Senate Select Committee on I i- 
telligence . However, this response is only a subset of broader 
questions of Community-wide structuring, integration, planning 
and management. The SSCI presentation can be viewed as a leap- 
frogging opportunity to generate an agreed-upon roadmap for 
short-, medium-, and long-range IC \DP planning. For example 
creating a centralized management structure would be a.n earnest 
of the DCI's intent to provide positive control over future 
planning and utilization of Community ADP resources. 

Regretably , resources on hand at the IC Staff level appua 
woefully inadequate for the SSCI effort and certainly fcr any 
broad Community planning function. Some specific steps need to 
be undertaken, perhaps providing some help for handling the n os- 
immediate problems, followed by creation of a new, higher level 
management mechanism to address longer term ADP integration, 
technical, budgeting and planning functions. 
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I. INTRODUCTION 


1.1 This report summarizes the results of a brief assessmem 
of Automatic Data Processing (ADP) activities within the Intei - 
ligence Community (IC) . The work was performed for the Director 
of Central Intelligence under Task No. 4 of Contract 100400. 

BACKGROUND 

1.2 The Intelligence Community utilizes automatic data proces- 
sing systems extensively to collect, process and produce National 
Intelligence.- In the past, each organization in the Community 
has independently planned, managed, and budgeted for data proces- 
sing related activities and computer hardware generally without 
regard to the needs or existing capabilities of the Community as . 
a' whole. The evolution of ADP and telecommunications within the 
Community has resulted in the development of many different com- 
puter software systems, some of which have duplicative charac- 
teristics and most of which are nonstandardized. This historical 
lack of centralized ADP management leadership and planning has 
resulted in the following: 

• Duplication of technical efforts, which have 
partially resulted from the rapid growth of 
ADP in the Community 

• Limited and questionable accountability for 
resource expenditures (no effective ADP cost 
or utilization/analysis) 


1 

Approved For Release 2002/07/03 : CIA-RDP83M00171R002100170001-6 



Approved Fo£lgje|e|S£ 03 n : C1A-RDP83M001 71 R0021 001 70001 -6 


• Limited Community planning for system inter- 
faces with only some interoperability and 
interconnectivity between systems 

• Lack of effective Community standards for 
security, data elements and files, and sys- 
tem performance (despite efforts of the In- 
formation Handling Committee formed to pro- 
mulgate standards) 

• Proliferation of diverse computer hardware, 
line protocols, and user terminals. 

1.3 Recognizing these deficiencies, the Director of Central 
Intelligence in the "National Foreign Intelligence Program 
(NFIP) and Resource Guidance: FY 79-8,3" has expressed his deter- 
mination that Automatic Data Processing and Telecommunications 
are major issues that must be dealt with from a total Community 
point of view. Other government organizations have made similar 
observations : the Senate Select Committee on Intelligence re- 
port of 19 May 1977 noted ADP resource activities need more 
careful coordination, direction, and interagency planning; the 
House Appropriations Committee report of 21 June 1977 was criti- 
cal of the planned expenditures of fiscal resources for agency 
systems (CIA SAFE and DIA ADISS) ; and the Director of the Office 
of Manpower and Budget stated that the Intelligence Community 
should develop a coordinated approach to the development of com- 
puterized data bases that maximizes the rapid and free flow of 
information vital to the quality and timeliness of the intelli- 
gence product and minimizes the duplication in both data files 
and ADP equipment. 
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1.4 More specifically, the SSCI requested that DCI prepare a 
comprehensive report and long-range plan for coordinated acqui- 
sition and utilization of IC ADP resources by November 1977. 
Types of detailed information requested include trend data and 
analysis of ADP costs from FY 70 - 79 by agency; identification 
and description of computer assets and use; near-term replace- 
ments or upgrades; identification of data files and interagency 
exchange; projected major problems, priorities and new initia- 
tives, and a broad organizational plan directed at improving 
coordination of ADP hardware acquisition, software and data base 
development, and interagency data base access. Efforts are cur- 
rently underway in IC Staff and DoD to generate inputs for the 
DCI response. (As an independent observation, it is believed 
that the Information Handling Division of the IC Staff which is 
responsible for the DCI response, including development of a 
Community-wide plan, is totally understaffed for responsibili tie 
of this magnitude at only four persons.) 

OBJECTIVES AND SCOPE 

1.5 The objectives of this study are to identify areas of com- 
monality in present or contemplated Intelligence Community AI'P 
utilization and potential avenues for avoiding or eliminating 
duplication, as inputs for future planning. 

1.6 The scope of the project was intentionally broad to incor- 
porate the Community as a whole with the depth limited to what 
might be accomplished with about 1 man-month of research effort. 
Hence the emphasis was on developing an overview of Community 
ADP usage, rather than in-depth analyses of specific problem 
areas. The approach used to gather information for this report 
involved reviewing written material and interviewing individuals 
within the Community. 
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CONTENTS 

1.7 The next section of the report reviews user needs and con 
monality between ADP systems. Section III discusses some alter 
native concepts for data base management systems, and the last 
section examines some relevant issues for achieving a Community 
wide information system. 
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II. USER NEEDS AND COMMONALITY 


MARKET 


2.1 The rapid growth of the Intelligence Community has contrib- 
uted to the duplicative and nonstandardized nature of ADP ac$TAip|N|T|_ 
ties within the Community. The total fiscal funding for ADP 


search and experimentation. — 1 


2.2 The volume of available information within the Community 
is rapidly increasing. Advanced collection systems have exoo 
nentially increased the availability of information. To effec- 
tively handle this information, technology must be exploited :o 
ensure the analyst can access, extract, manipulate and output 
data requested in a timely manner. The Defense Communication 
Agency has developed a projection for the level of transmission 
of data on AUTODIN II. This projection, displayed in Figure 2.1, 
indicates the magnitude of the increasing exchange of Community 
inf ormation- - a fifty-fold increase in the period '72 to '76, and 


1 / 


The number of intelligence organizations has increased from 
3 (FBI, Army's G-2, and Office of Naval Intelligence) in 1941 
to over 20 today. 


STATINTL 


2 / 

— The Information Handling 
muni tv planning, re search 


Committee's budget used for Com- 
, and experimentation is less thin 
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another twenty-fold jump by 1984, with accompanying growth in the 
numbers of terminals and computers. 

ADP SOFTWARE SYSTEM COMMONALITY 

2.3 Categories of software systems were examined to identify a 
select group of ADP software systems with commonality among Com- 
munity organizations. This cursory look at systems with duplica- 
tive characteristics centered around systems with characteristics 
of data-base-management-systems (DBMS). Table 2.1 lists systems 
that were identified and categorized according to: collection 
systems (of which only imagery systems were reviewed); communica- 
tions systems; processing systems; and production systems. The 
processing and production categories contained the systems with 
data- base -management- like characteristics . 

2.4 Because of satellite costs and the relatively short time- 
frame during which computerized imagery has existed, the imagery 
collection systems have evolved, for the most part, to fulfill 
specific Community needs. Communication systems (networks) al- 
ready involve a large number of Community users. Table 2.2 pro- 
vides a brief description of imagery collection and communications 
systems . 

2.5 A more suitable target for this analysis is the prolifera- 
tion of similar data base management systems within the proces- 
sing and production categories. Table 2.3 provides a brief de- 
scription of systems that are in the processing and production 
categories that potentially possess duplicative characteristics. 
While this list may include all types of systems, it probably 
represents only a fraction of the total number of systems. 
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DBMS USER REQUIREMENTS 

2.6 By reviewing system literature and documentation, a list 
of user requirements partly common to these DBMS systems was 
constructed. This list, with refinement, could be used to iden- 
tify the characteristics of a standard Community DBMS. If stan- 
dard DBMS's could be developed or adapted to fulfill user re- 
quirements, potential savings would result by not proliferating 
new systems. Table 2.4 contains a description of user functional 
requirements, summarizing the capabilities provided by all of the 
systems described in Table 2.3. 
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TABLE 2. 4 

USER FUNCTIONAL REQUIREMENTS 

DATA MANIPULATION 

- Search (indexed or free text) 

- Retrieve (browse, keyword, text, content analysis) 

- Hold 

- Edit 

- Output 

- Print 

- Alert 

FILE SUPPORT FUNCTIONS 

-Maintain (create, change, delete, replace, add) 

- Compose (page, scroll, insert, change, delete, move, 

print) 

- Storage, retrieval, and execution of past search 

strategies 

COMPUTATIONAL FUNCTIONS 

-Unique processing functions, simulation languages, 
APL, LISP, FORTRAN 

- Statistical functions 

- Curve fitting 

— Mensuration and isometrics 

-Models (heuristic, econometric, simulation) 
COMMUNICATIONS FUNCTIONS 

- Route (files and messages) 

- Alert 
USER AIDS 

— Computer aided instruction 

- Help function 

- Diagnostics and error messages 
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III. SOME ALTERNATIVE DATA BASE MANAGEMENT 

SYSTEM CONCEPTS 

STANDARD DBMS 

3.1 SAFE of the CIA and ADISS of the DIA are two systems being 
planned that are currently receiving major attention and discus- 
sion. From the relevant literature prepared for these two sys- 
tems (although ADISS does not have user requirements completely 
defined) , it appears that the two systems have a number of stan- 
dard DBMS characteristics. This is alarming since several other 
syst-ems, identified in Table 2.3, also have standard DBMS chai - 
acteristics, and the table contains only a small number of hichly 
visible DBMS systems. The COINS Project Office estimates that 
there are more than 30 DBMS-like systems operational in the Com- 
munity today. Many of these systems are "home-grown” and will 
eventually come up for replacement as the state-of-the-art 
advances . 

3.2 The issue then becomes obvious. First, does the Community 
need all of these DBMS systems, and second, can a Community stan- 
dard be developed or adapted and implemented? It is believed 
that the Community does not need all of these different DBMS sys- 
tems. Organizations typically argue that their applications are 
unique- -when in fact they are not. The feasibility of a Community 
standard for a DBMS or a set of DBMS systems is worthwhile inves- 
tigating. 

3.3 The Department of Commerce has on several occasions spon • 
sored a Conference of Data Systems Language (CODASYL) and this 
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organization has been active in the development of a common l'ata 
Description Language. Before additional retrieval languages are 
developed within the Community and the magnitude of the ADP com- 
monality/multiple language problem increases, the adaptation of 
CODASYL-like standards should be investigated. 

3.4 Ten years ago there were only a handful of specialized 
retrieval languages, usually only suited for one type of hard- 
ware. Today there are many "good" data base management systems 
and retrieval languages. Before another DBMS system like SAFE 
or ADISS is developed, "off- the-she Lf" DBMS systems should be 
investigated. There may'be a significant opportunity to reduce 
costs by building on these languages and modifying only part of 
the existing larger DBMS systems. In developing or adapting new 
DBMS systems, it is clear that the Community does not need the 
following: 

• Unique, inflexible and application-oriented 
data base systems that are limited to nar- 
row functional use 

• Procedures that are oriented toward ADP- 
inclined personnel 

• Language not optimally designed for non- 
ADP-trained analysts 

• Unique DBMS applicable only to one or two 
types of hardware. 

ALTERNATIVE SYSTEM CONCEPTS 

3.5 Some alternative conceptual designs for both the networking 
of the hardware and the software interface are examined briefly 
below. Axiomatic to this investigation is the belief that a 
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"single united communications network" and a "common language to 
access information" has the potential of contributing signifi- 
cantly to Community efficiency and effectiveness. 

Network Alternatives 


3.6 There are at least three network alternatives that should 
be considered, AUTODIN II, COINS, and IDHSC. A comprehensive 
evaluation of these three network alternatives is beyond the 
scope of this discussion, but the following summarizes status 
and capabilities. 

• AUTODIN II . Time estimates place the opera- 
tion of this network in the CY 82-84 time 

frame. The network will continue to be sup- 
ported by Defense Communication Agency (DCA) 
when it is operational. Since this network 
is 6 to 8 yr from estimated completion, we 
can only consider this alternative for the 
future. However, current design compatibility 
should be established to ensure that AUTODIN II 
can be used when it becomes operational. 

• COINS . The COINS I network is presently 

operational, while COINS II is currently 
being tested. COINS II will use the com- 
munication technology developed in the ARPA 
network, which could provide for secure com- 
munication on common carrier lines. COINS 
has made tremendous strides in providing in- 
telligence analysts with a means to transfer 
and communicate information on a world-wide 
basis by linking to IDHSC. A wealth of ex- 
perience exists both in the knowlege of 
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technical staff and the management staff. 

The COINS Project Management Office (PMO) 
is impressive in its forethought, experi- 
mentation, and thorough investigation of 
alternatives . 

• IDHSC . The Intelligence Data Handling Sys- 

tem Communication or the Worldwide Intelli- 
gence Communications System (WICS) provides 
DODIIS and COINS users with worldwide com- 
munications. This DIA snonsored network 
currently supports DIAOLS (DIA's data base 
management system). COINS and WICS II have 
been coordinated on a technical basis, but 
there are still major incompatibilities in 
the communication technology used by each. 

One problem claimed by IDHSC to have been 
resolved is the massive interfacing required 
with CIA, NSA, State, etc. 

3.7 The two alternative network technologies for near-term use 
appear to be COINS and IDHSC, since the time estimate for AUTO- 
DIN II operation is CY 82-84. From this limited analysis, 

COINS II technology appears the most promising candidate for a 
near-term solution to a single communication network, if the 
COINS II tests are successful. The duplicative characteristics 
of COINS and IDHSC require that both be carefully evaluated to 
ascertain whether both networks are justified. 

Multiple Language Problem 

3.8 Alternative conceptual system (hardware and software) de 
signs can be identified regardless of the decision to use COINS, 
IDHSC, or some other third undetermined network alternative. 
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But the experience and "lessons learned" in COINS and IDHSC 
should be used as a basis for long-term improvements in informa- 
tion handling and processing. 

3.9 The changing economics of hardware, the outlook for data 
transmission, and the large volume of data contained within tie 
worldwide intelligence community combine to suggest distributed 
system architecture. Distributed data base systems are attrac- 
tive where data are generated at several locations and are needed 
there for further processing, yet some applications require data 
stored at other locations as well. Distributed data base systems 
provide the ability for parts of Community data to be managed oy 
several processors and provide the analyst with the ability to 
view data from a single location and not be concerned about the 
geographical location of the data. COINS II and IDHSC are being 
designed using the distributed data base concept. Figure 3.1 
conceptually displays the COINS hardware network. 

3.10 There are technical problems associated with distributed 
systems that may be significant ("lockout" and "deadlock") and 
these issues will require a detailed knowledge of the hardware 
at each system node. Using the distributed data base concept, 
a few alternatives are identified below as means for establish- 
ing a common language to access information. 

3.11 The multiple language problems currently facing COINS 11 
or the DODI IS/ IDHSC network are displayed in Figure 3.2. A user 
enters his information requests/commands via a computer terminal 
That terminal is connected to computer hardware at location A. 

If the data requested is resident at location "A," then DBMS L 
is used to access the data files. But, if the user wants to ac- 
cess files at location "B,", then DBMS II must be used to access 
data files. This multiple language problem is compounded each 
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TAS = Terminal Access System 
IMP = Interface Message Processor 
CPU = Central Processing Unit 


FTCIIPF 7 1 

COMMUNITY ON-LINE INTELLIGENCE SYSTEM (COINS II) 
DISTRIBUTED ARPA-TYPE NETWORK 
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time a new node is added with a different language (some agen 
cies have multiple languages) . 

Alternative 1 : Standard DBMS 


3.12 One alternative for solving this problem is to replace all 
data base management languages with a Community standard DBMS 
language. Figure 3.3 displays a conceptual view of this alterna- 
tive . 

3.13 The advantages and disadvantages of this approach are 
listed below. 



Advantages 


Disadvantages 

1 . 

Standard DBMS 

1 . 

Costly solution 

2. 

Single language 

2. 

Long conversion time likel/ 

3. 

File sharing and processing 

3. 

Drain on personnel resources 


possible 

4. 

Bound to one DBMS architecture 



5. 

Major impact on users 


Alternative 2: Centralize Community Files 

3.14 Another alternative for solving this problem is to central- 
ize all Community files at one node of the network (probably us- 
ing current hardware). Figure 3.4 displays a conceptual view of 
this alternative, whose advantages and disadvantages are described 
below. 



Advantages 


Disadvantages 

1 . 

Community standard DBMS 

1 . 

Provide single failure po:int 

2. 

Maximum of two languages 

2. 

Duplicate files 

3. 

Centralized management 
control 

3. 

Added file conversion and 
maintenance 



4. 

Large file size 
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* IMP = Interface Message Processor 


FIGURE 3.2 

USE OF MULTIPLE LANGUAGE t> w i th i ui II 
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* IMP = Interface Message Processor 

FIGURE 2.3 

ALTERNATIVE 1: STANDARD DBMS 
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* IMP = Interface Message Processor 

FIGURE 3.4 

ALTERNATIVE 2; CENTRALIZE COMMUNITY FILES 
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Alternative 5: Multiple Language Translato r 


3.15 A third alternative for solving the multiple language prob- 
lem is to develop a multiple language translator. This alterna- 
tive, displayed in Figure 3.5, would allow the user to use cur- 
rent node DBMS language as the standard Community language. Ad- 
vantages and disadvantages are described below. 


Advantages 


Disadvantages 


1 . 

Minimal impact on users 

1 . 

2. 

Single Community user 



language 

2. 

3. 

Minimal conversion costs, 
if no existing files need 



to be converted 

3. 


Needs multiple language transla- 
tion packages (potential risk?) 

Difficult to maintain individ- 
ual translation packages fcr 
each vendor 

Additional personnel required 
to maintain translation pack- 
ages 


Alternative 4: Multiple Language Translator and Standa rd DBMS 

3.16 This is the last alternative that is presented, although a 
continuum of alternatives is possible. — ' Essentially, there is 
a combination of alternatives 1 and 3, which seems particularly 
relevant in light of the recent SAFE/ADISS interest and discus- 
sion. As part of the development of SAFE/ADISS, a user language 
must be defined. The characteristics and attributes of the defi- 
nition of this language could be used to create a multiple lan- 


1 / 


STATINTL 


For a more detailed description of alternatives to the 
multiple language problem (without regard to SAFE/ADISS) 
see a "Study of Multi-Lan guage Problems in COINS,” May 
1975, 
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* IMP = Interface Message Processor 


FIGURE 3.5 

ALTERNATIVE 3. MULTIPLE LANGUAGE / k.hnSea hjk 
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guage translation package. The actual development of SAFE/ADISS 
could be directed to the needs of the entire Community and would 
result in the development of a standard DBMS. 

3.17 The advantages and disadvantages of this approach are 
described below. 

Disadvantages 

1. Multiple language translation 
packages must be developec 

2. Maintenance would be difficult 
for translation packages, but 
would phase out over time 

3. Additional personnel may be 
required to maintain transla- 
tion packages 

4. Bound to one DBMS architecture 

5. Requires strong, central man- 
agement control 


to solve the multiple language 
and DBMS problem presents a challenge in achieving a reasonable 
balance between the expected user benefits and associated costs. 
Therefore, to perform a comprehensive evaluation of the alter- 
natives presented in this section or any others, the costs ard 
implementation schedule associated with each alternative must be 
developed in detail. However, certain relevant observations can 
be made. There are a large number of DBMS-like systems within 
the Commuinity, and these systems will eventually come up for 
replacement as the state-of-the-art advances. SAFE and ADISS 
may well be part of what will be a continuing trend to upgrace 
and replace obsolete "home grown" DBMS systems. As a result, 
alternative 4 (Multiple Language Translator and a Standard DBMS) 
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Advantages 

1. Single Community language 

2. Community standard DBMS 
that could be phased in 
over time and serve as 
DBMS for SAFE/ADISS 

3. Minimal conversion costs 

4. Minimal impact on users 

5. File sharing and proces- 
sing possible 


Summary 


3.18 The selection of an approa 
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appears to be an attractive compromise because this alternative 
provides a means to move toward a Community standard while min- 
imizing the impact of change, and eventually evolving toward a 
standard. However, to refine this approach, in-depth cost/ben- 
efit analyses should be performed for these and other possible 
alternatives. This effort should identify and describe the spe- 
cific characteristics of the DBMS system and resident hardware 
as well as describe the costs and benefits associated with each 
alternative . 
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IV. COMMUNITY-WIDE INFORMATION SYSTEMS 


4.1 Community data, that is, intelligence data needed by mere 
than one organization, is a reality. The set of complex policies 
and technical problems accompanying this reality must be deter- 
mined to establish an efficient and effective manner by which to 
communicate and transfer data within the Community. The concept 
of Community data has been demonstrated in the Community On-line 
Intelligence System (COINS) , a Community test-bed system that 
links NSA, CIA, DIA, NPIC, and State, and which can be accessed 
by world-wide commands. This system currently provides service 
for 9,000 queries per month on over 65 files. Also, the Depart- 
ment of Defense Intelligence Information System (DODIIS) , an 
evolving DoD Community system, has demonstrated the concept of 
Community data by providing for the exchange of information on 
part of over 175 files contained within DODIIS. In fact, 86 bil- 
lion characters of automated intelligence information (enough for 
300 complete sets of Encyclopedia Britannica) are exchanged an- 
nually within DODIIS alone. — ^ 

4.2 Potential cost justification for Community information sys- 
tems has been demonstrated by COINS. Over 100 million communica- 
tion transmissions were saved annually in COINS by eliminating 13 
NSA reports, most of which were daily or weekly publications. 
However, this is only a small step in the cost savings that could 
be realized by the Community. The fact that there are software 
systems within the Community that have duplicative capabilities 

— ' High, Paul L., Jr., ”DoD Automated Intelligence Flow,” Pro- 
ceedings of Department of Defense Intelligence Information 
System Managers Conference, 26-30 September 1976. 


Approved For Release 2002/07/03 : C88-RDP83M00171R002100170001-6 



Approved For 001 70001 ' 6 


and that fewer systems could potentially serve the Community 
provides a basis for significant future cost savings. 

MAJOR POLICY QUESTIONS 

4.3 To lend perspective to the larger problem of coordinating 
and integrating the ADP planning elements within the Community 
for the development of a more accessible Community information 
system, it is important to understand the areas in which poLicy 
must be defined for Community ADP activities. For the purpose 
of the overview, we have identified the following seven areas 


• Shared data bases 

• Multiple retrieval languages and data base 

management systems 

• Data standards 

• Communication network interfaces 

• Training and user aids 

• Research and experimentation 

• Security 

Table 4.1 describes specific issues and some alternative ap- 
proaches associated with each area of major policy. Each of 
these policy questions is complex and has been addressed to some 
extent over the past several years by IHC and special subcommit- 
tees and study groups. It is believed that to achieve signifi- 
cant benefits of Community-wide efficiency and effectiveness via 
commonality will require "reasonable" resolution of all of these 
thorny policy (and related technical) questions. 
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TABLE 4.1 

OVERVIEW OF MAJOR POLICY QUESTIONS 


Policy Areas 

Specific Issues 

Alternative Approaches 


Budget Responsibilities: What organi- 
zation is responsible for budgeting 
for Community use of data files and 
validating the cost/benefit of Com- 
munity data file? 

• Host computer facility 

• Proponent of data base 

• Shared with users on a proportionate 

use basis . 

• Information Handling Committee (IHC) 

• Community Council (new organization) 

Shared 
data bases 

Access S Control Responsibilities: 

• IC staff 

• IHC 

• Proponent of data base 

• Other group 

What organization is responsible 
for ensuring authorized access? 


Quality ^ Timelinoss of Data: What 
ensures the accuracy, quality and 
timeliness of the data? 

• Proponent of data base 

• IHC 

• Community Council 

• Other group 

Multiple 

Retrieval 

Languages 5 

Data Base 

Management 

Systems 

(DBMS) 

Community Standards: Should there be 
a Community standard for retrieval 
language or DBMS's? 

• Single standard 

• Community guidelines 

• Multiple standards 

• No standard 

Maintenance Update § Modification: 

• Host computer facility 
t Community Council 

• Contractor (s) 

• DODI IS/COINS 

What organization is responsible 
for the maintenance required for 
operational use of these languages/ 
DBMS's? 

Multiple Language Translator: Can a 
multiple language translator be ■ 
developed? 

• No 

• For some languages 

• All languages 

Data Element 
Standards 

Necessity: Does the Community need 
UaTa element standards? 

t None 

• For selected areas 

• For historical and new data files 

• For new data files 

Policy : Who aeciaes how much 
standardization? 

• Individual agencies 

• IHC j 

• Community Council I 
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TABLE 4.1 (Cont) 


Policy Areas 

Specific Issues 

Alternative Approaches 

Data 

Standards 

(cont) 

Approach: Given that data standards 
are required, what approach should 
be used to create standards? 

■ Solve technically by developing a 
cross-walk file 

• Use a committee to identify data 
element standards 

• Use a contractor to propose data 
element standards 

• Create a new Community group (in a 
full-time capacity) to address 
data standards 

Budget Responsibilities : What organi- 
zation is responsible for budgeting 
for Community data standards? 

• IC staff 

• IHC 

• Others (e.g., Community Council) 

Communica- 

tions 

Network 

Interfaces 

' 

Management Control: What organi za- 
tion is responsible for defining 
line protocols and gateway inter- 
faces, and ensuring exchange of 
technology? 

• DCA 

• IHC 

• IC staff 

• Committee of Host Agencies 

Maintenance: What organization is 
responsible for maintaining inter- 
face software? 

• Host agencies 

• Contractors 

• Interagency working group 

• IHC 

Training 

and 

User Aids 

Responsibilities: What organization 
has the responsibility for training 
Community users? 

• IC staff 

• DODI IS/C0INS 

• IHC 

• Others (e.g., Info Science Center, CIA) 

• File sponsors 

Experimenta- 
tion and 

Management Responsibilities: What 
organization(s) has responsibility 
for coordinating § directing over- 
all experimentation 5 research? 

• IHC • Community Council 

• COINS • IR()D Council 

• ARPA 

• IC staff 

Research 

Budgetary Responsibilities: What or- 
ganization (s) has responsibility 
lot budgeting fur Community experi- 
mentation and ’•“search’ 

• All agencies 

• Selected agencies 

• IC staff ■ Community Council 

• IHC • IRfiP Counci! 
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TABLE 4.1 (Cont) 


Policy Areas 

Specific Issues 

Alternative Approaches 

Security 

Authoritative Source: Current refer- 
ence material on security for ADP 
is vague and inadequate. What 
organization is responsible for 
developing an authoritative refer- 
ence that defines security require- 
ments for a transmission over a 
network and data stored in computer? 

• IHC 

• IC staff 

• DCA 

• Individual agencies 

• Other Community group 

Inspection § Enforcement: What orga- 

• IHC 

• IC staff 

• Individual agencies 

• Technical accreditation group 

nizational group is responsible for 
investigating ADP hardware and soft- 
ware (i.e., data base protection, 
valid "need- to-know" operating 
system security, etc,)? 

Research 5 Experimentation: What 

• IHC 

• IC staff 

• DCA 

• Individual agencies 

• Other Community groups 

organization is responsible for 
budgeting for research and experi- 
mentation and is tasked to resolve 
new problems brought on by techno- 
logical developments? 

Sharing Community Data: What organi- 
zational group is responsible for 
threat definition, risk clarifica- 
tion, and other security issues 
associated with the sharing of 
Community data? 

• IC staff 

• IHC 

• Other Community group 

• Individual agencies 
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4.4 The list of policy issues compresses to the following basic 
questions in each area: 


Policy Area 

• Shared Data Bases-- 


• Multiple Retrieval 
Languages and Data 
Base Management 
Systems- - 


• Data Standards -- 


• Communications 

Network Inter- 
faces- - 


• Training and User 
Aids - - 


• Experimentation and 

Research- - 


Issues 

What organization (s ) has the 
responsibility for Budgeting, 
ensuring proper access and 
control, and verifying the 
quality and timeliness of in- 
formation contained within 
data bases; what is to be 
shared and with whom? 

Should there be a Community 
standard language, since this 
is a major interface problem 
to the analysts? Is it feas- 
ible to develop and maintain 
a language translator? What 
organization is responsible 
for maintenance required for 
operational use of these re- 
trieval systems? 


What organization is responsi- 
ble for training Community 
users and what is the cost to 
the Community, and is present 
Investment adequate? 

What organization has responsi- 
bility for coordinating overall 


Does the Community need stand- 
ards and is the Community will- 
ing to allocate the resources 
required? If so, what approach 
should be used (solve techni- 
cally, use Committee, use 
contractors, use in-house 
personnel) ? 

What organization has manage- 
ment responsibility for de- 
fining communication standards 
(line protocols; gateway in- 
terfaces, etc.) and evaluating 
competing network technologies? 
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experimentation and research 
and avoiding duplication? By 
what means are the results 
passed to the Community? 

• Security-- What organization is responsi- 

ble for developing an authori- 
tative reference on ADP secur- 
ity? How can an individual 
organization’s security proced- 
ures be effectively inspected 
and accredited? What are the 
multi-level compartmentation 
problems associated with ADP 
security? 


PLANNING FOR A COMMUNITY -WIDE SYSTEM 

4.5 Development of a Community-wide system is a complex process 
involving centralized direction and interagency coordination and 
planning. Some of the steps which converge on a master plan for 
developing such a system are listed below. What is contained in 
these steps, and how they relate, is illustrated in the suggested 
flow diagram, or "plan for the plan," shown in Figure 4.1. 

• Identify current information system capa- 

bilities and existing hardware configura- 

' tions 

• Evaluate current information handling 

capabilities 

• Study present organization of Community 
ADP elements 

• Improve management control of ADP elements 
in the Community 

• Perform top-down information requirements 

study 
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IDENTIFY CURRENT INFORMATION 
SYSTEM CAPABILITIES 5 EXISTING 
HARDWARE CONFIGURATIONS 


EVALUATE CURRENT INFORMATION 
HANDLING CAPABILITIES 


— Identify cost and workload 
trends 

— Identify inventory of com- 
puter systems user agencies, 
purpose, degree of interface 
and life span 


— Evaluate systems with dupli- 
cative characteristics 
(including SAFE/ADISS § 
CQINS/WICSI I) 

— Identify and evaluate incon- 
sistencies and information 


— Identify projected replace- 
ments 


gaps 

— Evaluate systems on 


— Identify current major soft- 


- Timeliness 



ware systems 

— Describe major data files 


- Relevance/need 




Develop dictionary 
describing hardware 
and software 
capabilities 


- Completeness 


PRC ( t ) 
Decisions 

and degree of information 
exchange 

rs 

■PI 

* Performance 



1 

— Perform cost/benefit 
analysis 


' 





IDENTIFY INFORMATIONAL 
FLOW 


IDENTIFY FUNCTIONAL 
REQUIREMENTS OF 
ANALYSTS 


STUDY PRESENT ORGANIZATION 1 
OF COMMUNITY I 

ADP ELEMENTS I 


-Each organization in 
relation to the Community 

-Management control of 
each organization 


IMPROVE MANAGEMENT CONTROL 
OF ADP ELEMENTS IN COMMUNITY 


PERFORM TOP-DOWN 
INFORMATION REQUIREMENTS 
STUDY 


IDENTIFY AND PROJECT 
INFORMATION NEEDS 
FOR COMMUNITY 


— Define new authority and 
responsibilities 

— Identify new policies 

— Provide fiscal resources and 
staff 

— Describe new fiscal reporting 
procedures for Community agencies; 


CONDUCT POLICIES g ! 
STANDARDS REVIEW I 


CONDUCT FISCAL 
REVIEW 


I 


DEFINE AND EVALUATE 
HARDWARE AND SOFTWARE 
ALTERNATIVES FOR COMMUNITY 
1979- 1985 


-Community networks 

■ Standard data base management 
software 

-Security standards 
-New hardware 
-Define RgD activities 


PREPARE AND UPDATE 
COMMUNITY ADP ACTIVITY 
MASTER PLAN 


COMMUNITY £ 


FIGURE 4.1 
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• Define and evaluate Community hardware and 
software alternatives 

• Prepare and update Community ADP master plan. 
IMPLEMENTATION 

4.6 Currently, the DCI Intelligence Information Handling Com- 
mittee is charged with the responsibility to serve as the cata- 
lyst for bringing about Community-wide ADP planning and implemen- 
tation. The available funds, manpower, and the expertise re- 
quired to perform this crucial responsibility are not adequate 

to allow the IHC to effectively execute this stated responsibil- 
ity. Further, the Committee concept has demonstrated little 
progress in addressing the most basic Community-wide ADP prob- 
lems (i.e., data standards, security issues, etc.). 

4.7 To provide for future integration and planning efforts, it 
would be valuable to identify a central focal point to coordinate 
the development of new hardware and software systems to reduce 
redundancies and to maximize utility across the Community. At 

the same time, reporting and budgeting policies need to be changed 
to identify allocations of ADP resources, beyond the limited ac- 
countability found today. 

4.8 One approach would be to dissolve the IHC and to create a 
new "Office" with line responsibilities. This office could re- 
side within the IC Staff, or perhaps be answerable to the DCI 
directly, since ADP integration efforts are so fundamental to 
Community-wide integration as a whole. This office would be 
charged with ADP Community-wide planning and implementation and 
be the central focal point within the Community for the coordi - 
nation of new major software systems, reducing the possibility 
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of major system redundancy. As part of its responsibilities, 
the office would have budgetary authority over ADP activities 
and related Community R$D programs. This new office would re- 
solve the limited and questionable accountability for ADP re- 
source expenditure by developing and implementing new reporting 
and budgetary policies. 
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